Agent Notify
PassAudited by VirusTotal on May 11, 2026.
Overview
Type: OpenClaw Skill Name: agent-notify Version: 0.1.0 The 'Agent Notify' skill is a utility designed to provide audio and visual notifications for AI coding agents across Windows, macOS, and Linux. It functions by detecting the agent's environment (e.g., ~/.claude, ~/.openclaw), installing platform-specific scripts (notify-macos.sh, notify-linux.sh, notify-windows.ps1), and modifying the agent's settings.json to trigger these scripts via hooks. While the skill performs high-privilege actions such as modifying configuration files and executing shell commands, its behavior is transparent, well-documented, and strictly aligned with its stated purpose of providing notifications. No evidence of data exfiltration, persistence backdoors, or malicious intent was found.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Setup may run local commands and inspect common agent configuration directories on your machine.
The setup flow directs local shell commands to detect the OS and agent directories. This is expected for installing notification hooks, but it is still local command execution.
Run this command to detect the operating system: ```bash uname -s 2>/dev/null || echo "Windows" ```
Only choose setup when you intend to install it, and review the commands before allowing them to run.
After installation, your agent may continue playing sounds or showing notifications when configured events occur.
The default configuration enables persistent notification behavior for future agent confirmation and completion events. This is aligned with the skill purpose, but it changes ongoing agent behavior.
"Notification": { "enabled": true, "type": "confirm" },
"Stop": { "enabled": true, "type": "done" }Keep only the hook events you want enabled and verify how to disable or remove the configuration if you no longer need it.
If you follow the README install command, you may install whatever is currently on that remote branch.
The README suggests installing from an unpinned GitHub clone. That may fetch code different from the reviewed registry artifact.
git clone https://github.com/Miluer-tcq/agent-notify.git cp -r agent-notify ~/.claude/skills/
Prefer the reviewed package or a pinned, trusted commit when installing manually from GitHub.
Windows users may expect complete Windows support even though the referenced Windows implementation is not present in the reviewed artifact set.
The README references a Windows notification script, but the provided manifest/code files only include Linux and macOS scripts. This is a transparency/reliability mismatch rather than evidence of malicious behavior.
+-- scripts/ | +-- notify-windows.ps1 # Windows notification
Verify the Windows script exists and review it before using this skill on Windows.